Method for application security and electronic device for performing the same

Abstract

A method for application security and an electronic device for performing the method are provided. The electronic device includes a memory configured to store computer-executable instructions and at least one processor configured to execute the instructions by accessing the memory, wherein the at least one processor is configured to, in response to the instructions being executed by the at least one processor, record a source type of an application based on the source type of the application when installing the application on the electronic device, determine whether the application corresponds to an untrusted application based on the source type of the application, and in response to the application corresponding to an untrusted application, perform one or more of security functions set for the untrusted application.

What is claimed is: 
     
       1. An electronic device, comprising:
 memory configured to store computer-executable instructions; and 
 at least one processor communicatively coupled to the memory, 
 wherein the computer-executable instructions, when executed by the at least one processor individually or collectively, cause the electronic device to:
 record a source type of an application based on a source of the application when installing the application on the electronic device, 
 determine whether the application corresponds to an untrusted application based on the source type of the application, and 
 in response to the application corresponding to an untrusted application and an icon of the application being present:
 output, on a screen, a symbol indicating that the application is the untrusted application by overlaying the symbol on the icon of the application or output the symbol without outputting the icon. 
 
 
 
     
     
       2. The electronic device of  claim 1 , wherein the computer-executable instructions further include instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to determine the source type of the application based on source information of the application appearing in a package setting file of the application. 
     
     
       3. The electronic device of  claim 2 , wherein the computer-executable instructions further include instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to classify the source type of the application as one of a trusted application, an untrusted application, and a default application based on the source information of the application. 
     
     
       4. The electronic device of  claim 1 , wherein the computer-executable instructions further include instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to, in response to the application being included in an allowlist that is a list of trusted applications, determine that the application is a trusted application regardless of the source type of the application. 
     
     
       5. The electronic device of  claim 1 ,
 wherein the computer-executable instructions further include instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to, in response to the application corresponding to a default application, treat the application as a trusted application regardless of the source type of the application, and 
 wherein a default application is an application pre-loaded in the electronic device by a manufacturer of the electronic device. 
 
     
     
       6. The electronic device of  claim 1 , wherein the computer-executable instructions further include instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to:
 in response to the application corresponding to the untrusted application and the icon of the application being absent, output only the symbol. 
 
     
     
       7. The electronic device of  claim 1 , wherein the computer-executable instructions further include instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to, in response to the application corresponding to the untrusted application, perform a function of outputting a notification window to notify a user of a security risk of the untrusted application. 
     
     
       8. The electronic device of  claim 1 , wherein the computer-executable instructions further include instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to, in response to the application corresponding to the untrusted application, perform a function of outputting a selection window to receive, from a user, a selection of whether to grant permission to the untrusted application whenever a request to execute the untrusted application is received. 
     
     
       9. The electronic device of  claim 1 , wherein the computer-executable instructions further include instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to, in response to the application corresponding to the untrusted application, perform a function of removing permission granted to the untrusted application when a set time elapses after permission is granted to the untrusted application by a user selection. 
     
     
       10. The electronic device of  claim 1 , wherein the computer-executable instructions further include instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to, in response to the application corresponding to the untrusted application, at a set time interval, perform a function of identifying one or more of untrusted applications installed on the electronic device and providing a list of the identified one or more of the untrusted applications and a notification window to notify a user of a security risk of the identified one or more of the untrusted applications. 
     
     
       11. The electronic device of  claim 10 , wherein the computer-executable instructions further include instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to output an interface screen for selecting whether to remove the identified one or more of the untrusted applications. 
     
     
       12. The electronic device of  claim 1 , wherein the computer-executable instructions further include instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to provide application information containing the source type of the application to a user. 
     
     
       13. A method performed by an electronic device for application security, the method comprising:
 receiving a request to install an application; 
 recording a source type of the application based on a source of the application in response to receiving the request to install the application; 
 installing the application on an electronic device; 
 determining whether the application corresponds to an untrusted application based on the source type of the application; and 
 in response to the application corresponding to an untrusted application and an icon of the application being present:
 outputting, on a screen, a symbol indicating that the application is the untrusted application by overlaying the symbol on the icon of the application or outputting the symbol without outputting the icon. 
 
 
     
     
       14. The method of  claim 13 , wherein the recording of the source type of the application comprises classifying the source type of the application as one of a trusted application, an untrusted application, and a default application based on source information of the application appearing in a package setting file of the application. 
     
     
       15. The method of  claim 13 , further comprising:
 in response to the application corresponding to the untrusted application, performing a function of outputting a selection window to receive, from a user, a selection of whether to grant permission to the untrusted application whenever a request to execute the untrusted application is received. 
 
     
     
       16. The method of  claim 13 , further comprising:
 in response to the application corresponding to the untrusted application, identifying, at a set time interval, one or more of untrusted applications installed on the electronic device; and 
 providing a list of the identified one or more of the untrusted applications and a notification window to notify a user of a security risk of the identified one or more of the untrusted applications. 
 
     
     
       17. One or more non-transitory computer-readable storage media storing computer-executable instructions that, when executed by at least one processor of an electronic device individually or collectively, cause the electronic device to perform operations, the operations comprising:
 receiving a request to install an application; 
 recording a source type of the application based on a source of the application in response to receiving the request to install the application; 
 installing the application on an electronic device; 
 determining whether the application corresponds to an untrusted application based on the source type of the application; and 
 in response to the application corresponding to an untrusted application:
 outputting, on a screen, a symbol indicating that the application is the untrusted application by overlaying the symbol on an icon of the application or outputting the symbol without outputting the icon. 
 
 
     
     
       18. The method of  claim 13 , wherein the outputting of the symbol comprises:
 in response to the icon of the application being absent, outputting only the symbol. 
 
     
     
       19. The method of  claim 13 , further comprising:
 in response to the application corresponding to a default application, treating the application as a trusted application regardless of the source type of the application, 
 wherein a default application is an application pre-loaded in the electronic device by a manufacturer of the electronic device.